$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9509/274ED15E601A11EDB7416B6CC4F9AE02/Ub6jYJQp2RscTkAi2mi9ZDwzw_s.mft File: Ub6jYJQp2RscTkAi2mi9ZDwzw_s.mft (raw, json) Hash identifier: K33ZfH5BeO4oK1SOm+MKp84akqEy+sy23b2rzb0Dnww= Subject key identifier: 8B:31:4C:DB:E2:9C:77:E9:92:72:26:00:69:8C:D6:4A:03:CF:61:9E Authority key identifier: 51:BE:A3:60:94:29:D9:1B:1C:4E:40:22:DA:68:BD:64:3C:33:C3:FB Certificate issuer: /CN=A91E9509/serialNumber=51BEA3609429D91B1C4E4022DA68BD643C33C3FB Certificate serial: 01D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ub6jYJQp2RscTkAi2mi9ZDwzw_s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9509/274ED15E601A11EDB7416B6CC4F9AE02/Ub6jYJQp2RscTkAi2mi9ZDwzw_s.mft Manifest number: 01D1 Signing time: Fri 25 Apr 2025 02:02:21 +0000 Manifest this update: Fri 25 Apr 2025 02:02:21 +0000 Manifest next update: Fri 02 May 2025 02:02:21 +0000 Files and hashes: 1: Ub6jYJQp2RscTkAi2mi9ZDwzw_s.crl (hash: o/4zraxxKn/E11H1wb3i+TICzmmeQZverLZWaO9g1FA=) 2: F23AE0AE632D11ED8C102087C4F9AE02.roa (hash: ALMLm78gllLBfFwEbfYMxy6G6W9jUB1EmmnPpTHelsE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9509/274ED15E601A11EDB7416B6CC4F9AE02/Ub6jYJQp2RscTkAi2mi9ZDwzw_s.crl rsync://rpki.apnic.net/member_repository/A91E9509/274ED15E601A11EDB7416B6CC4F9AE02/Ub6jYJQp2RscTkAi2mi9ZDwzw_s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ub6jYJQp2RscTkAi2mi9ZDwzw_s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:02:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 472 (0x1d8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9509, serialNumber=51BEA3609429D91B1C4E4022DA68BD643C33C3FB Validity Not Before: Apr 25 02:02:21 2025 GMT Not After : May 2 02:02:21 2025 GMT Subject: CN=680aed2d-8ddd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:50:b4:c1:bb:b3:83:14:2e:0b:5c:6c:c3:90: 7c:98:d3:29:17:92:27:ab:7c:4a:06:de:c6:c4:61: 37:16:de:2a:7a:81:e9:ce:eb:57:b5:47:3d:78:ee: cf:b1:7a:1c:a8:0b:e4:d2:4b:1c:48:4f:1f:a8:ef: a5:8f:88:52:20:ad:1c:1a:a9:3d:c4:b2:ac:92:a2: 71:de:26:15:17:8c:51:69:ce:33:19:fd:db:18:c1: b5:66:78:2a:83:21:a4:28:e2:ab:ff:58:a5:1a:cd: 87:2b:d0:4e:55:9f:54:5a:b8:4f:30:e6:12:4c:65: c5:f9:b4:47:a9:95:2d:20:a6:4e:8e:a7:c9:f9:57: ad:73:c1:0e:80:1d:d0:25:af:24:ee:3a:48:22:b7: 36:fa:e2:c2:25:d6:cd:2f:85:08:5e:88:fa:29:cb: 4e:df:92:c6:47:62:4c:54:75:9a:e6:bb:a6:fb:94: 84:14:7e:a7:b6:66:cb:60:f9:69:12:d5:f2:2c:0a: b9:ec:dc:d6:18:d3:de:00:cd:95:40:ab:f8:8b:f0: de:3b:00:7b:94:ac:7c:7c:6a:0b:39:10:21:ce:38: a1:34:44:5c:d3:09:c8:87:9b:0b:3c:83:a3:bb:7a: 1e:86:fb:9b:c1:73:f2:e4:18:8c:91:7b:d2:4d:cd: 7e:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:31:4C:DB:E2:9C:77:E9:92:72:26:00:69:8C:D6:4A:03:CF:61:9E X509v3 Authority Key Identifier: keyid:51:BE:A3:60:94:29:D9:1B:1C:4E:40:22:DA:68:BD:64:3C:33:C3:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9509/274ED15E601A11EDB7416B6CC4F9AE02/Ub6jYJQp2RscTkAi2mi9ZDwzw_s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ub6jYJQp2RscTkAi2mi9ZDwzw_s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9509/274ED15E601A11EDB7416B6CC4F9AE02/Ub6jYJQp2RscTkAi2mi9ZDwzw_s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:f7:7a:a1:63:ce:d2:04:b5:6d:71:fe:f6:62:78:0a:02:3e: fd:b4:da:7b:4c:94:c9:e2:32:14:d9:66:b3:0e:89:4b:9e:f9: e0:7d:8f:e0:0f:9b:a7:31:61:1d:12:5c:b8:86:a9:1e:4e:69: ba:55:e6:7d:78:07:7f:2a:45:4a:14:38:a2:76:4b:1b:20:18: 3e:73:42:cf:cf:6c:38:d0:c9:7e:6c:a6:b6:ba:19:76:bf:40: 14:12:de:7a:0a:5c:c8:bb:ff:e1:88:c3:44:90:76:15:62:66: 7e:44:4b:df:30:82:ff:48:4d:42:81:70:45:54:f4:ce:be:72: dc:53:6b:2c:a9:38:db:fb:00:30:1d:8e:19:97:c9:7b:d5:8b: 97:ca:12:9a:74:53:f5:ab:37:95:1a:fd:cf:9b:19:c5:76:d3: a4:8e:9c:37:3e:4c:49:46:cc:28:03:f9:46:a4:57:d3:21:7e: 21:74:12:88:62:48:c7:d8:66:05:98:16:35:e9:eb:6a:67:f3: 74:56:00:63:7e:93:39:48:39:b6:94:60:8f:54:13:60:1b:dc: 0d:3c:62:6c:7e:77:b9:9a:06:6b:e6:76:8f:90:5a:09:3d:82: 87:8c:56:fa:d5:18:70:09:b0:a3:ad:97:cd:93:33:1a:1b:5b: be:40:64:db -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTk1MDkxMTAvBgNVBAUTKDUxQkVBMzYwOTQyOUQ5MUIxQzRFNDAyMkRBNjhCRDY0 M0MzM0MzRkIwHhcNMjUwNDI1MDIwMjIxWhcNMjUwNTAyMDIwMjIxWjAYMRYwFAYD VQQDEw02ODBhZWQyZC04ZGRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwFC0wbuzgxQuC1xsw5B8mNMpF5Inq3xKBt7GxGE3Ft4qeoHpzutXtUc9eO7P sXocqAvk0kscSE8fqO+lj4hSIK0cGqk9xLKskqJx3iYVF4xRac4zGf3bGMG1Zngq gyGkKOKr/1ilGs2HK9BOVZ9UWrhPMOYSTGXF+bRHqZUtIKZOjqfJ+Vetc8EOgB3Q Ja8k7jpIIrc2+uLCJdbNL4UIXoj6KctO35LGR2JMVHWa5rum+5SEFH6ntmbLYPlp EtXyLAq57NzWGNPeAM2VQKv4i/DeOwB7lKx8fGoLORAhzjihNERc0wnIh5sLPIOj u3oehvubwXPy5BiMkXvSTc1+hwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIsxTNvi nHfpknImAGmM1koDz2GeMB8GA1UdIwQYMBaAFFG+o2CUKdkbHE5AItpovWQ8M8P7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOTUwOS8yNzRFRDE1RTYw MUExMUVEQjc0MTZCNkNDNEY5QUUwMi9VYjZqWUpRcDJSc2NUa0FpMm1pOVpEd3p3 X3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ViNmpZSlFwMlJzY1RrQWkybWk5WkR3endfcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OTUwOS8yNzRFRDE1RTYwMUExMUVEQjc0MTZCNkNDNEY5QUUwMi9VYjZqWUpRcDJS c2NUa0FpMm1pOVpEd3p3X3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAq93qhY87SBLVtcf72YngKAj79tNp7TJTJ4jIU2WazDolLnvngfY/g D5unMWEdEly4hqkeTmm6VeZ9eAd/KkVKFDiidksbIBg+c0LPz2w40Ml+bKa2uhl2 v0AUEt56ClzIu//hiMNEkHYVYmZ+REvfMIL/SE1CgXBFVPTOvnLcU2ssqTjb+wAw HY4Zl8l71YuXyhKadFP1qzeVGv3PmxnFdtOkjpw3PkxJRswoA/lGpFfTIX4hdBKI YkjH2GYFmBY16etqZ/N0VgBjfpM5SDm2lGCPVBNgG9wNPGJsfne5mgZr5naPkFoJ PYKHjFb61RhwCbCjrZfNkzMaG1u+QGTb -----END CERTIFICATE-----Generated at Sat Apr 26 16:48:43 2025 by rpki-client